Senior Privacy & Compliance Assurance Consultant

Insight Global (United States); United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Insight Global (United States) seeks an experienced Information Assurance and Privacy Consultant to assess regulatory, privacy, and compliance risks across a complex enterprise. You will translate findings for leadership and collaborate with legal, privacy, compliance, and security teams, focusing on HIPAA and 42 CFR Part 2 in healthcare settings.

The role requires 5-6+ years in consulting, deep enterprise risk experience, and the ability to provide practical guidance without legal advice.

Qualifications

• 5-6+ years of consulting experience.
• Strong enterprise information assurance, privacy, and regulatory risk experience.
• HIPAA Security / Privacy assessment experience.
• Direct 42 CFR Part 2 experience, including applicability within behavioral health or substance-use-disorder environments.
• Experience assessing protected data and privacy risk in complex healthcare environments.
• Ability to translate regulatory requirements and technical findings into business risk and actionable recommendations.
• Ability to provide regulatory/compliance guidance without presenting legal advice.

Responsibilities

• Assess findings for privacy, regulatory, and compliance risk.
• Advise on HIPAA Security and Privacy requirements.
• Evaluate 42 CFR Part 2 applicability and protected-data considerations.
• Review how sensitive/protected data is accessed, handled, and assessed.
• Distinguish material compliance risks from lower-priority observations.
• Work directly with legal, privacy, compliance, and security teams.
• Support documentation of the overall enterprise compliance risk position.
• Translate technical findings into executive-level business and regulatory impact.

Skills

Consulting experience

Information assurance

Privacy regulatory risk

HIPAA security/privacy

42 CFR Part 2 experience

Regulatory guidance

Job description

Insight Global (United States) seeks an experienced Information Assurance and Privacy Consultant to assess regulatory, privacy, and compliance risks across a complex enterprise. You will translate findings for leadership and collaborate with legal, privacy, compliance, and security teams, focusing on HIPAA and 42 CFR Part 2 in healthcare settings.

The role requires 5-6+ years in consulting, deep enterprise risk experience, and the ability to provide practical guidance without legal advice.